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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

Box Patent Application 

Assistant Commissioner for Patents 

Washington, D.C. 20231 

NEW APPLICATION TRANSMITTAL 

Transmitted herewith for filing Is the patent application of 
Inventors): Nouri ALLAHWERDI, Lassi HIPPELAINEN 



WARNING: 37 C.F.R § 1.41(a)(1) points out: 

"(a) A patent is applied for In the name or names of the actual inventor or Inventors. 

"(1) The inventorship of a nonprovisIonaJ application is that inventorship set forth In the oath or 
declaration as prescribed by § 7.63, except as provided for in § 1.53(d)(4) and § 1.63(d). If an 
oath or declaration as prescribed by § 1.63 is not filed during the pendency of a nonprvvisfonai 
application, the inventorship Is that Inventorship set forth in the application papers fifed pursuant 
to § 1.53(b), unless a petition under this paragraph accompanied by the fee set forth In § U17(i) 
is filed supplying or changing the name or names of the inventor or inventors." 

For (title): METHOD AND ARRANGEMENT FOR RELIABLY IDENTIFYING A USER IN A COMPUTER SYSTEM 



CERTIFICATION UNDER 37 CFJt. § 1.10* 
(Exprema Mall label number ht mmnSmiory.) 
(Expremm Mall certfficatkm h option*!.) 



I .hereby certify that this New Application Transmittal and the drcurjwrrtJ r^-^cLtcLas attached therein are belrxi 

deposited with the United States Postal Service on this date tfctober & » ™ • | n an envelope 

as -Express Mail Poet Office to Addressee/ mailing Label Number EL6'g/4ZUb8BUS 



dressed to the: Assistant Commissioner for Patents, Washington, D.C. 20231. 

Debra 6. Conrad 



(toe-or print name. 



/ person mailing paper) 



A. 



0 



WARNING: 



•WARNING: 



Signature of pereonjnaiiing paper 

Certificate of mailing (first class) or facsimile transmission procedures of 37 C.P.R § 1.8 cannot be 
used to obtain a date of mailing or transmission for this conespondence. 

Bach paper or fee filed by 'Express Mali* mu*f have the number of the 'Express Ma//" mailing label 
placed thereon prior to mailing. 37 C.F.R. § 1.10(b). 

'Since the filing of correspondence under § 7. 10 without the Express Malt mailing label thereon 
Is an oversight that can be avoided by the exercise of reasonable cere, requests for waiver of this 
requirement wilt not be granted on petition." Notice of Oct. 24, 1996, 60 Fed. Reg. 56,439, at 56,442. 
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1. Type of Appiication 

This new application is for a(n) 

(check one applicable item below) 

El Original (nonprovisional) 

□ Design 
□ Plant 

WARNING: Do not use this transmittal for a completion in the U.S. of an International Application under 35 
U.S.C. § 371(cX4), unless the Internationa/ Application is being filed as a divisional, continuation 
or continuation-in-part application. 

WARNING: Do not use this transmittal for the Wing of a provisional application. 

NOTE: If one of the following 3 items apply, then complete and attach ADDED PAGES FOR NEW APPLICATION 
TRANSMITTAL WHERE BENEFIT OF A PRIOR U.S. APPUCAWON CLAIMED and a NOTIFICATION 
IN PARENT APPLICATION OF THE FILING OF THIS CONVNUAVON APPLICATION. 

□ Divisional. 

□ Continuation. 

□ Continuation-in-part (C-l-P). 

2. Benefit of Prior U.S. Application^) (35 U.S.C. §§ 119(e), 120, or 121) 

NOTE: A nonprovisional application may claim an invention disclosed in one or more prior filed copending 
nonprovisional applications or copending international applications designating the United States of 
America. In order for a nonprovisional application to claim the benefit of a prior filed copending 
nonprovisional appiication or copending international application designating the United States of 
America, each prior application must name as an inventor at least one inventor named in the later filed 
nonprovisional application and disclose the named inventor's invention claimed in at least one claim 
of the later filed nonprovisional application in the manner provided by the first paragraph of 35 U.S.C. 
§ 1 12. Each prior application must also be: 

(Q An international application entitled to a filing date in accordance with PCT Article 1 1 and 
designating the United States of America; or 

fti) Complete as set forth in § 1.51(b); or 

ftii) Entitled to a fifing date as set forth in § 1.53(b) or § 1.53(d) and include the basic filing fee set 
forth in § 1.16; or 

(iv) Entitled to a fifing date as set forth in § 1. 53(b) and have paid therein the processing and retention 
fee set forth in § 1.21(0 within the time period set forth in $ 1.53(f). 

37 C.F.R. § 1.78(aXV. 

NOTE: If the new application being transmitted is a divisional, continuation or a continuation-in-part of a parent 
case, or where the parent case is an International Application which designated the U.S., or benefit 
of a prior provisional application is claimed, then check the following item and complete and attach 
ADDED PAGES FOR NEW APPLICAVON TRANSMITTAL WHERE BENEFIT OF PRIOR U.S. APPLICA- 
VON(S) CLAIMED. 

WARNING: If an application claims the benefit of the filing date of an earlier fifed application under 35 U.S.C. 

§§ 120, 121 or 365(c), the 20-year term of that application will be based upon the ffling date of 
the earliest U.S. application that the application makes reference to under 35 U.S.C. §§ 120, 121 
or 365(c). (35 U.S.C. § 154(a)(2) does not take Into account, for the determination of the patent 
temy, any application on which priority Is claimed under 35 U.S.C. §§ 119, 365(a) or 365(b).) For 
a c~4-p application, applicant should review whether any claim in the patent that will issue is 
supported by an earlier application and, if not, the applicant should consider canceling the reference 
to the earlier filed application. The term of a patent is not based on a dalm-by-clalm approach. 
See Notice of April 14, 1995, 60 Fed. Reg. 20,195, at 20,205. 
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WARNING: When the test day of pendency of a provisions! application talis on a Saturday. Sunday, or Federal 
holiday within the District of Columbia, any nonprovlsional application claiming benefit of the 
provisional application must be Wed prior to the Saturday, Sunday, or Federal holiday within the 
District of Columbia. See 37 C.F.R. § 1.76(a)(3). 

□ The new application being transmitted claims the benefit of prior U.S. applica- 
tion®. Enclosed are ADDED PAGES FOR NEW APPLICATION TRANSMITTAL 
WHERE BENEFIT OF PRIOR U.S. APPLICATIONS) CLAIMED. 

3. Papers Enclosed 

A. Required for filing date under 37 C.F.R. § 1.53(b) (Regular) or 37 C.F.R. § 1.153 
(Design) Application 

14 Pages of specification 

4_ pages of claims 

4 Sheets of drawing 

WARNING: DO NOT submit original drawings. A high quality copy of Vie drawings should be supplied when 
filing a patent application. The drawings that are submitted to the Office must be on strong, white, 
smooth, and non-shiny paper and meet the standards according to § 1*84. If corrections to the 
drawings are necessary, they should be made to the original drawing and a high-quality copy of 
the corrected original drawing then submitted to the Office. Only one copy Is required or desired. 
For comments on proposed then-new 37 C.F.R § 1.84, see Notice of March 9, 1988 (1990 O.G. 
57-62). 

NOTE: "Identifying Indicia, if provided, should Include the application number or the title of the Invention, 
Inventor's name, docket number (if any), and the name and telephone number of a person to cell If 
the Office is unable to match the drawings to the proper application. This Information should be placed 
on the back of each sheet of drawing a minimum distance of 1.5 cm. (5/8 Inch) down from the top 
of the page . . 37 C.F.R. § 1.84(c)). 

(complete the following, If applicable) 

□ The enclosed drawlng(s) are photograpb(s), and there Is also attached a 
"PETITION TO ACCEPT PHOTOGRAPH(S) AS DRAWING(S)." 37 C.F.R. 
§ 1.84(b). 

□ formal 

□ Informal 

B. Other Papers Enclosed 

Pages of declaration and power of attorney 

i Pages of abstract 

Other 

4. Additional papers enclosed 

□ Amendment to claims 

□ Cancel In this applications claims before 

calculating the filing fee. (At least one original independent claim must be 
retained for filing purposes.) 

□ Add the claims shown on the attached amendment. (Claims added have 
been numbered consecutively following the highest numbered original 
claims.) 

EJ Preliminary Amendment 

□ Information Disclosure Statement (37 C.F.R. § 1.98) 

□ Form PTO-1449 (PTO/SB/08A and 08B) 

□ Citations 
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□ Declaration of Biological Deposit 

□ Submission of "Sequence Listing," computer readable copy and/or amendment 
pertaining thereto for biotechnology Invention containing nucleotide and/or 
amino acid sequence. 

□ Authorization of Attorney(s) to Accept and Follow Instructions from Representa- 
tive 

□ Special Comments 

□ Other 

5. Declaration or oath (including power of attorney) 

NOTE: A newly executed declaration is not required in a continuation or divisional application provided that 
the prior nonprvvisionaf application contained a declaration as required, the application being filed is 
by all or fewer than all the Inventors named in the prior application, there Is no new matter in the 
application being filed, and a copy of the executed declaration filed fa the poor application (showing 
the signature or an indication thereon that H was signed) is submitted. The copy must be accompanied 
by a statement requesting deletion of the names ofperson(s) who are not inventors of the application 
being filed. If the declaration in the prior application was filed under § 1.47, then a copy of that 
declaration must be tiled accompanied by a copy of the decision granting § 1,47 status or, If a nonsigning 
person under § 1.47 has subsequently joined in a prior application, then a copy of the subsequently 
executed declaration must be filed. See 37 C.F.R §§ 1.63(gJ(1H3). 

NOTE: A declaration filed to complete an application must be executed, identify the specification to which it 
is directed, identity each inventor by full name Including family name end at least one given name, without 
abbreviation together with any other given name or initial, and the residence, post office address and 
country or citizenship of each inventor, and state whether the inventor is a sole or Joint inventor. 37 
C.F.R. § 1.63(aX1H4)~ 

□ Enclosed 
Executed by 

(check all applicable boxes) 

□ inventors). 

□ legal representative of inventors). 
37 C.F.R. §§ 1.42 or 1.43. 

□ joint inventor or person showing a proprietary 
interest on behalf of inventor who refused to sign 
or cannot be reached. 

□ This is the petition required by 37 C.F.FL § 1 .47 and the statement 
required by 37 C.F.R. § 1.47 Is also attached. See item 13 below 
for fee. 

(X]t Not Enclosed. 

NOTE: Where the filing is a completion in the U.S. of an International Application or where the completion of 
the US. application contains subject matter in addition to the International Application, the application 
may be treated as a continuation or continuation-in-part, as the case may be, utilizing ADDED PAGE 
FOR NEW APPLICAVON TRANSMITTAL WHERE BENEFIT OF PRIOR U.S. APPLICATION CLAIMED. 

xf3 Application is made by a person authorized under 37 C.F.R. § 1.41(c) on 
behalf of ail the above named inventors). 

(The declaration or oath, along with the surcharge required by 37 C.F.R § 1.16(e) 

can be fifed subsequently). 

□ Showing that the filing Is authorized. 

(not required unless called into question. 37 C.F.R. § 1.41(d)) 
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6. Inventorship Statement 

WARNING: If the nsmed inventors ere each not the inventors of all the claims an explanation, including the 
ownership of the various claims at the time the last claimed invention was made, should be 
submitted. 

The inventorship for all the claims in this application are: 

□ The same. 

or 

□ Not the same. An explanation, including the ownership of the various claims at 
the time the last claimed invention was made, 

□ is submitted. 

□ will be submitted. 
7* Language 

NOTE: An application including a signed oath or declaration may be filed in a language other than English, 
An English translation of the non-English language application and the processing fee of $130.00 
required by 37 C.F.R. § 1. 17f$ is required to be filed with the application, or within such time as may 
be set by the Office. 37 C.F.R. § 1.52(a). 

C33 English 

□ Non-English 

□ The attached translation includes a statement that the translation Is accu- 
rate. 37 C.F.R. § 1.52(d). 

8. Assignment 

H An assignment of the Invention to Nokia Mobile Phones Ltd. 



□ Is attached. A separate □ "COVER SHEET FOR ASSIGNMENT (DOCU- 
MENT) ACCOMPANYING NEW PATENT APPLICATION" or □ FORM PTO 
1595 is also attached. 

EJ will follow. 

NOTE: "If an assignment is submitted with a new application, send two separate letters-one tor the application 
and one for the assignment" Notice of May 4, 1990 (1114 O.G. 77-76). 

WARNING: A newly executed "CERTIFICATE UNDER 37 C.F.R. § 3.73(b)" must be filed when a continuation- 
in-part application is filed by an assignee. Notice of Apnl 30, 1993, 1150 O.G. 62-64. 
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9. Certified Copy 

Certified copy(les) of application^) 



Country 

Finland 


Appln. No. 

19992343 


29 October 1999 


Filed 


Country 


Appln. No. 




Filed 


Country 


Appln. No. 




Filed 



from which priority Is claimed 
23 is (are) attached. 



□ will follow. 

NOTE: The foreign application forming the basis for the claim for priority must be referred to In the oath or 
declaration. 37 C.F.R. § 1.55(a) and 7.63. 

NOTE: 777/5 hem Is for any foreign priority for which the application being filed directly relates. If any parent 
US. application or International Application from which this application claims benefit under 35 U.S.C 
§ 120 Is Itseff entitled to priority from a prior foreign application, then complete Item 18 on the ADDED 
PAGES FOR NEW APPLICATION TRANSMITTAL WHERE BENEFIT OF PRIOR U.S. APPUCAT90N(S) 
CLAIMED. 

10. Fee Calculation (37 C.F.R. § 1.16) 
A. £3 Regular application 



CLAIMS AS FILED 


Number filed 


Number Extra 


Rate 


Basic Fee 
37 C.F.R. § 1.16(a) 
$ 710.00 


Total 

6lalms (37 C.F.R. 

§ 1.16(c)) 19 - 


20 = 0 x 


$ 18.00 


0 


Independent 

Claims (37 C.F.R. 

§ 1.16(b)) 2 - 


3 - 0 x 


$ 80.00 


0 


Multiple dependent clalm(s), 
If any (37 C.F.R. § 1.16(d)) 


+ 


$ 270.00 





□ Amendment cancelling extra claims Is enclosed. 

0 Amendment deleting multiple-dependencies Is enclosed. 

□ Fee for extra claims Is not being paid at this time. 

NOTE; If the fees for extra claims are not paid on filing they must be paid or the claims cancelled by amendment, 
prior to the expiration of the time period set for response by the Patent and Trademark Office In any 
notice of fee deficiency. 37 C.F.R, § 1. 16(d). 

Filing Fee Calculation $ — 710 ' Q0 

B. □ Design application 

($320.00 -37 C.F.R. § 1.16(f)) 

Filing Fee Calculation $ 

C. □ Plant application 

($ 490.00-37 C.F.R. § 1.16(g)) 

Filing fee calculation $ 
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11. Small Entity Statements) 

□ Statement(s) that this Is a filing by a small entity under 37 C.F.FL § 1.9 and 1.27 
Is (are) attached. 

WARNING: "Status as a smalt entity must be specifically established in each application or patent In which 
the status is available and desired. Status as a small entity in one application or patent does not 
affect any other application or patent, including applications or patents which are directly or 
indirectly dependent upon the application or patent In which the status has been established. The 
refiling of an application under § 1.53 as a continuation, division, or continuation-in-part (including 
a continued prosecution application under § h 53(d)), or the filing of a reissue application requires 
a new determination as to continued entitlement to small entity status for the continuing or reissue 
application. A nonprovlslonat application claiming benefit under 35 U.S.C. § 119(e), 120, 121, or 
365(c) of a prior application, or a reissue application may rely on a statement filed In the prior 
application or in the patent if the nonprovisionaf application or the reissue application includes a 
reference to the statement in the prior application or in the patent or includes a copy of the 
statement in the prior application or In the patent and status as a small entity is stiff proper and 
desired. The payment of the small entity basic statutory filing fee will be treated as such a reference 
for purposes of this section. 0 37 C.F.R. § 1.28(aX2). 

WARNING: "Small entity status must not be established when the person or persons signing the, . . statement 
can unequivocally make the required setf-certificatlon." M.P.E.P., § 509.03, 6th ed., rev. 2, July 
1996 (emphasis added). 

(complete the following, if applicable) 

□ Status as a small entity was claimed In prior application 

/ , filed on , from which benefit 

Is being claimed for this application under: 

35 U.S.C. § □ 119(e), 

□ 120, 

□ 121, 

□ 365(c), 

and which status as a small entity Is still proper and desired. 
□ A copy of the statement In the prior application Is Included. 
Filing Fee Calculation (50% of A, B or C above) 

$ 

NOTE: Any excess of the full fee paid will be refunded if small entiVy status Is established and a refund request 
are filed within 2 months of the date of timely payment of a full fee. The two-month period is not 
extendable under § 1.136. 37 C.F.R. § 1.26(a). 

12. Request for International-Type Search (37 C.F.FL § 1.104(d)) 

(complete, if applicable) 

□ Please prepare an international-type search report for this application at the time 
when national examination on the merits takes place. 
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13. Fee Payment Being Made at This Time 

□ Not Enclosed 

□ No filing fee is to be paid at this time. 

(This and the surcharge required by 37 C.F.R. 5 1.16(e) can be paid 
subsequently.) 

O Enclosed 

CB Filing fee $ 710 - 0Q 

□ Recording assignment 
($40.00; 37 C.F.R. § 1.21(h)) 

(See attached "COVER SHEET FOR 
ASSIGNMENT ACCOMPANYING NEW 

APPLICATION".) $ 

□ Petition fee for filing by other than all the 
Inventors or person on behalf of the Inventor 
where inventor refused to sign or cannot be 
reached 

($130.00; 37 C.F.R. §§ 1.47 and 1.17(1)) $ 

□ For processing an application with a 
specification in 

a non-English language 

($130.00; 37 C.F.R. §§ 1.52(d) and 1.1 7{k)) $ 

□ Processing and retention fee 

($130.00; 37 C.F.R. §§ 1.53(d) and 1.21(1)) $ 

□ Fee for international-type search report 

($40.00; 37 C.F.R. § 1.21(e)) $ 

NOTE: 37 C.F.R § 1*21(0 establishes a fee for processing and retaining any application that is abandoned for 
falling to complete the application pursuant to 37 C.F.R § 7.53(9 and this, as well as the changes to 
37 C.F.R. §§ r.53 and 1.7B(aX1), indicate that in order to obtain the benefit of a prior U.S. application, 
either the basic filing fee must be paid, or the processing and retention fee of § 1.21$ must be paid, 
within 1 year from notification under § 53fi>. 

Total fees enclosed $ — 710 *°° 

14. Method of Payment of Fees 

H Check In the amount of $ 710.00 _ — 



□ Charge Account No. In the amount of 

$ 

A duplicate of this transmittal Is attached. 
NOW: Fees should be itemized in such a manner that it is clear for which purpose the fees are paid, 37 C.F.R 
§ 1.22(b). 
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15. Authorization to Charge Additional Fees 
WARNING: If no fees are to be paid on filing, the Mowing Hems should not be completed. 
WARNING: Accurately count claims, especially multiple dependent claims, to avoid unexpected high charges, 
if extra claim charges are authorized, 

BP The Commissioner is hereby authorized to charge the following additional fees 
by this paper and during the entire pendency of this application to Account No. 
16-1350 : 

KJ 37 C.F.R. § 1.16(a), (f) or (g) (filing fees) 
Q 37 C.F.R. § 1.16(b), (c) and (d) (presentation of extra claims) 
NOTE' Because additional fees for excess or multiple dependent claims not paid on Tiling or on later presentation 
must only be paid or these claims cancelled by amendment prior to the expiration of the time period 
set tor response by the PTO in any notice of fee deficiency (37 C.F.R § 1. 1 6(d)), it might be best not 
to authorize the PTO to charge additional daim fees, except possibly when dealing with amendments 
after final action. 

£3 37 C.F.R. §1.1 6(e) (surcharge for filing the basic filing fee and/or declaration 

on a date later than the filing date of the application) 
0 37 C.F.R. § 1.17(a)(1H5) (extension fees pursuant to § 1.136(a)). 
Etf 37 C.F.R. § 1.17 (application processing fees) 

NOTE' " -A written request may be submitted in an application that is an authorization to treat any concurrent 
o\ future reply, requiring a petition for an extension of time under this paragraph for its timely submission, 
as incorporating a petition for extension of time for the appropriate length of time. An authorization to 
charge all required fees, fees under § 1.17, or aff required extension of time fees win be treated as a 
constructive petition for an extension of time in any concurrent or future reply requiring a petition for 
an extension of time under this paragraph for Its timely submission. Submission of the fee set forth In 
§1.1 7(a) will also be treated as a constructive petition for an extension of time In any concurrent reply 
requiring a petition for an extension of time under this paragraph for Hs timely submission. " 37 C.F.R. 
§ 1.1 36(a)(3). 

□ 37 C.F.R. § 1.18 (issue fee at or before mailing of Notice of Allowance, 
pursuant to 37 C.F.R. § 1.311(b)) 

NOTE: Where an authorization to charge the issue fee to a deposit account has been filed before the mailing 
of a Notice of Allowance, the issue fee will be automatically charged to the deposit account at the time 
of mailing the notice of allowance. 37 C.F.R. § 1.311(b). 

NOTE' 37 CF.Ft. § 1.26(b) requires 'Notification of any change in status resulting In loss of entitlement to smalt 
entity status must be filed in the application . . . prior to paying, or at the time of paying, . . . the Issue 
fee. . . ' Prom the wording of 37 C.F.R. § 1.26(b), (a) notification of change of status must be made 
even if the fee is paid as "other than a small entity" and (b) no notification is required If the change 
Is to another small entity. 
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16. Instructions as to Overpayment 

NOTE: m . . . Amounts of twenty-five dollars or less will not be returned unless specifically requested within 



a reasonable time, nor wilt the payer be notified of such amounts; amounts over twenty-five dollars may 
be returned by check or, if requested, by credit to a deposit account" 37 C.F.ft $ 1.26(a). 



[3 Credit Account No. 16-1350 
□ Refund 



SEND ALL CORRESPONDENCE TO: 
Clarence A. Green, Reg. No.: 24,622 
PERMAN & GREEN, LLP 
425 Post Road 

Fairfield, Connecticut 06430 



Reg. No. 24,622 



SIGNATURE OF PRACTITIONER 

Clarence A. Green 




(type or print name of attorney/) 



Tel. No. ( 203) 259-1800 



PERMAN & GREEN, LLP 



P.O. Address 



Customer No. 2512 



425 Post Road, Fairfield, Connecticut 06430 
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□ Incorporation by reference of added pages 

(check the following item If the application in this transmittal claims the benefit of 
prior U.S. application^) (including an international application entering the U.S. 
stage as a continuation, divisional or C-/-P application) and complete and attach 
the ADDED PAGES FOR NEW APPLICATION TRANSMITTAL WHERE BENEFIT OF 
PRIOR US. APPLICATION^) CLAIMED) 

□ Plus Added Pages for New Application Transmittal Where Benefit of Prior U.S. 
Application(s) Claimed 

Number of pages added • 

□ Plus Added Pages for Papers Referred to In Item 4 Above 

Number of pages added 

□ Plus added pages deleting names of Inventor(s) named In prior application^) 
who Is/are no longer lnventor(s) of the subject matter claimed in this application. 

Number of pages added 

□ Plus "Assignment Cover Letter Accompanying New Application" 

Number of pages added 

[H Statement Where No Further Pages Added 

(if no further pages form a part of this Transmittal, then end this Transmittal with 
this page and check the following Item) 

B This transmittal ends with this page. 
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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



Express Mail No.: EL627420688US 

In re Application of: ALLAHWERDI et al. 

SERIAL NUMBER: EXAMINER: 

FILING DATE: Herewith ART UNIT: 

TITLE: METHOD AND ARRANGEMENT FOR RELIABLY IDENTIFYING A 

USER IN A COMPUTER SYSTEM 

ATTORNEY DOCKET NO.: 324-009927-US(PAR) 

The Commissioner of Patents and Trademarks 
Washington, D.C. 20231 

PRELIMINARY AMENDMENT 

Dear Sir: 

Please amend the above-identified, enclosed patent application as follows: 
IN THE CLAIMS: 

Please amend Claims 8, 9, 17, 18 and 19 as shown below. 

Claim 8, line 1, delete "any one of preceding claims 1 to T and insert -claim 1--. 
Claim 9, line 1, delete "or 7" 

Claim 17, line 1, delete "claims 15 or 16" and insert --claim 15-. 

Claim 18, lines 1 and 2, delete "any one of preceding claims 10 to 17" and insert 
claim 10—. 



2 



Claim 19, lines 1 and 2, delete "any one of preceding claims 10 to 17" and insert 
claim 10—. 

REMARKS 

Please enter this preliminary amendment prior to calculation of the fees. 
RespectfuHyslUbmitted, 




Clarerice A. Green, Reg. No. 24,622 Date 

Perman & Green, LLP 

425 Post Road 

Fairfield, CT 06430 

(203) 259-1800 Customer No. 2512 



1 

Method and arrangement for reliably identifying a user in a 
computer system 

FIELD OF THE INVENTION 

The invention relates to a method and arrangement for reliably 
5 identifying a user in a computer system. The invention particularly relates to a 
solution wherein a connection to a computer system is implemented by a mo- 
bile station, preferably a mobile station in a mobile telephone system. 

BACKGROUND OF THE INVENTION 

Most computer systems have been designed such that users have 

10 to log into a system from their own workstation by using their unique user 
name and password. A server of the system, typically an authentication 
server, checks whether such a user name has been defined among the users 
of the system and whether a given password corresponds with said user 
name. If so, the user is allowed to access the system; otherwise no access is 

15 allowed. This is to guarantee that the system is secure, i.e. to prevent unau- 
thorized users from accessing the system. When the workstations have a fixed 
connection to the computer system through, for example, integrated cabling, 
this method of identifying users usually suffices. 

Nowadays, however, remote connections are often needed in a 

20 computer system. This means that the user's workstation does not have a 
fixed connection to the computer system but the connection is established 
through a public network, typically a telephone network. Through a modem, for 
example, the workstation is connected to the telephone network, through 
which a telephone connection is established to the system through a modem 

25 series of the system. In such a case, much more is required of the identifica- 
tion of the user because the connection is established through a public tele- 
phone network whose security cannot be controlled by the system adminis- 
trator. Identifying users on the basis of user names and passwords in a con- 
nection established over a public network is dubious since unauthorized ac- 

30 cess to the system then becomes possible by e.g. guessing the user names 
and passwords. User names are often formed from the names of the users, 
and if the users themselves may choose their passwords, they are quite often 
easy to infer or guess. 

The connections between a terminal and a computer system are 

35 often implemented by using a protocol called a PPP (Point-to-Point) protocol. 
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PPP connections often utilize methods called a CHAP (Challenge-Handshake 
Authentication Protocol) method or a PAP (Password Authentication Protocol) 
method. In the PAP method, a password is transferred over a transmission 
path unencrypted, so the protection it provides is quite weak. The CHAP 
5 method utilizes an encrypted password. In the method, the same algorithm is 
applied at both ends of the transmission path. The network transmits a random 
number to the terminal, which computes a secret value on the basis of the 
number, user name and password by utilizing the algorithm. The secret value, 
password and user name are transmitted to the network, which computes a 
10 password from the secret value and compares it with the transmitted pass- 
word. 

It is further known to use a method called a RADIUS (Remote 
Authentication Dial In User Service Protocol, RFC 2138) method when a user 
logs in. 

15 Various methods have also been developed for enhancing the reli- 

ability and security in identifying a user of a computer system. Since pass- 
words defined by the user are often easy to crack, the prior art solutions utilize 
one-time passwords. Hence, each password is only used once when the user 
logs in, and even if a third party were to crack the password, it would be of no 

20 use since another password would be used the next time. In this method, both 
the user and the authentication server of the computer system must have cor- 
responding password lists available. The user may have the password list 
written on paper, for example, or alternatively, a separate device called a 
trusted device may be used to generate one-time passwords. 

25 US 5 485 519 discloses a method wherein a user has a separate 

device to generate a password. The user enters a predetermined password 
into the device, which forms from the password and encrypted bit sequence 
programmed into the device a password to be used on the connection. This 
password is encrypted and stored in the device to be used for generating the 

30 next password. In the solution of the publication, the password generated by 
the device has to be inputted into a processor apparatus establishing the con- 
nection, such as a computer, for example, through a magnetic tape reader or 
diskette drive. 

US 4 720 860 discloses a solution utilizing one-time passwords 
35 wherein a user has a separate device, e.g. a card of the smart card type, 
which generates a one-time password to be read by the user from the display 
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of the device and entered by the user into a computer operating as a means of 
communication. The device generates a one-time code on the basis of a fixed 
code and a varying parameter, such as time. The fixed code is programmed in 
the device. It is also feasible that the fixed code is inputted into the device. The 
5 authentication server of the computer system calculates a second identifica- 
tion number by utilizing the same parameters, and if the identification numbers 
match, the connection is allowed and feasible. 

US 5 657 388, US 5 373 559 and US 5 491 752 disclose another 
solution utilizing one-time passwords wherein a user has a simple, separate 

10 device called a token, such as a memory card, for example, with a secret code 
stored therein. A means of communication, a portable computer, for example, 
reads the secret code from the memory of the card. The user enters his or her 
personal password into the communication means, which generates a one- 
time password on the basis of the secret code, password and time, and which 

15 then transmits the generated password to the authentication server of the 
computer system. 

In all prior art solutions described above, the user has to carry with 
him several devices, i.e. a separate password generator, typically a card of the 
smart card type, and the actual communication means for establishing a con- 

20 nection to the desired computer system. Furthermore, in all known solutions, 
the user has to actively either enter the one-time password read from the 
smart card into the communication means or alternatively, supply the entire 
card into the communication means, thus enabling the data in the card to be 
read. 

25 BRIEF DESCRIPTION OF THE INVENTION 

An object of the invention is thus to provide a method and an ar- 
rangement implementing the method such that a user can be identified in a 
reliable manner without, however, causing any trouble or inconvenience to the 
user. This is achieved by a method of reliably identifying a user in a computer 

30 system, in which method a mobile station is used for communicating with the 
computer system and a personal identification number is supplied into the mo- 
bile station. 

The method of the invention comprises generating a first one-time 
password in the mobile station without any action by the user by utilizing a 
35 known algorithm on the basis of a persona! identification number of the user, 
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subscriber-specific identifier read from a subscriber-specific identification 
module of the mobile station, device-specific identifier of the mobile station 
and time, encoding the first one-time password and the subscriber-specific 
identifier of the user at the mobile station, transmitting the encoded password 
5 and subscriber-specific identifier to an authentication server of the computer 
system, identifying the user at the authentication server on the basis of the 
subscriber-specific identifier, and searching a database for the personal identi- 
fier number of the user and the device-specific identifier of the mobile station 
associated with the user, generating a second one-time password at the 

10 authentication server by utilizing the predetermined algorithm on the basis of 
the personal identification number of the user, subscriber-specific identifier, 
device-specific identifier of the mobile station and time, comparing the first 
password and the second password with each other at the authentication 
server, and if the passwords match, enabling the telecommunication connec- 

15 tion between the mobile station of the user and the computer system. 

The invention further relates to an arrangement for reliably identify- 
ing a user in a computer system, which arrangement comprises a mobile sta- 
tion used for communicating with the computer system, the mobile station 
comprising a subscriber-specific identification module comprising a subscriber- 

20 specific identifier, a device-specific identifier permanently encoded in the mo- 
bile station, means for reading a personal identifier number which is supplied 
by the user and which enables the device to be used, means for checking the 
correctness of the identifier number always before the device is put to use, 
and which arrangement comprises an authentication server comprising mem- 

25 ory means for storing the user names of the users in the system and the cor- 
responding personal identifiers and device-specific identifiers. 

In the arrangement of the invention, the mobile station comprises 
means for generating a first one-time password without any action by the user 
by utilizing a known algorithm on the basis of the personal identification num- 

30 ber of the user, subscriber-specific identifier read from a subscriber-specific 
identification module of the mobile station, device-specific identifier of the mo- 
bile station and time, means for encoding the first one-time password and the 
subscriber-specific identifier of the user, means for transmitting the encoded 
password and subscriber-specific identifier to an authentication server of the 

35 computer system, and the authentication server is arranged to identify the user 
on the basis of the subscriber-specific identifier, and search a database for the 
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persona! identifier number of the user and the device-specific identifier of the 
mobile station associated with the user, generate a second one-time password 
by utilizing the predetermined algorithm on the basis of the personal identifica- 
tion number of the user, subscriber-specific identifier, device-specific identifier 
5 of the mobile station and time, compare the first password and the second 
password with each other, and if the passwords match, enable the telecom- 
munication connection between the mobile station of the user and the com- 
puter system. 

The idea underlying the invention is that the mobile station itself is a 

10 "trusted device", which means that the user does not need any separate de- 
vices to carry with him when the user desires to establish a secure connection 
to the computer system. The solution of the invention also enables connection 
setup to be automatized without the security being disturbed. 

In the solution of the invention, the mobile station, which establishes 

15 a connection to the computer system, thus itself generates the necessary one- 
time password. The password is generated by utilizing a predetermined algo- 
rithm having time, subscriber identifier of the user, device identifier of the mo- 
bile station and the PIN code of the user as its parameters. 

Several advantages are achieved by the method and arrangement 

20 of the invention. A drawback of the previous solutions, i.e. the use of two sepa- 
rate devices, can be avoided. Further, the connection setup process itself is 
quicker since at this stage the user does not have to enter passwords into the 
device; external peripherals are also unnecessary. The solution of the inven- 
tion also provides strict data security since a potential intruder will not benefit 

25 from intercepting the algorithms or programs used. Copied programs do not 
function in a foreign device even if the password of the user, or PIN, had been 
cracked. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The invention is now described in closer detail in connection with 
30 the preferred embodiments and with reference to the accompanying drawings, 
in which 

Figure 1 shows an example of a system whereto a solution of the 
invention can be applied, 

Figures 2a and 2b are flow diagrams illustrating a method of the in- 
35 vention, and 
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Figure 3 illustrates an example of the structure of a mobile station of 
the invention. 

DETAILED DESCRIPTION OF THE INVENTION 

Referring to Figure 1, examine an example of a system whereto a 
5 solution of the invention can be applied. In the solution of the invention, a user 
is in the possession of a mobile station 100, which is used for communicating 
with a desired computer system 102. Figure 1 only shows an example of a 
radio system of the invention. The details of the structure of the radio system 
and the connection to the computer system per se may also be implemented 

10 differently as long as the characteristics of the invention are taken into ac- 
count. The solution of the invention is thus not restricted to a GPRS system 
only although such a system has been used as the example in Figure 1 . 

A radio network typically comprises a fixed network infrastructure, 
i.e. a network part 104, and subscriber terminals 100, which may be fixedly 

15 located, vehicle-mounted or portable terminals to be carried around. The net- 
work part 104 comprises base stations 106. A plurality of base stations 106 
are, in turn, controlled in a centralized manner by a radio network controller 
108 communicating with them, A base station 106 comprises transceivers 110 
and a multiplexer unit 1 1 2. 

20 The base station 106 further comprises a control unit 114, which 

controls the operation of the transceivers 110 and the multiplexer 112. The 
multiplexer 112 arranges the traffic and control channels used by several 
transceivers 110 to a single transmission connection 116. 

The transceivers 110 of the base station 106 are connected to an 

25 antenna unit 118, which is used for implementing a bi-directional radio con- 
nection 120 to a subscriber terminal 100. The structure of the frames to be 
transmitted in the bi-directional radio connection 120 is defined system- 
specifically, and the connection is called an air interface. 

The radio network controller 108 comprises a group switching field 

30 122 and a control unit 124. The group switching field 124 is used for connect- 
ing speech and data and for combining signaling circuits. The base station 106 
and the radio network controller 108 form a radio network subsystem 126, 
which further comprises a transcoder 128. The transcoder 128 is usually lo- 
cated as close to a mobile services switching center 130 as possible since 

35 speech can then be transferred in a cellular radio network form between the 



transcoder 128 and the radio network controller 108 by using as little trans- 
mission capacity as possible. 

The transcoder 128 converts the different digital speech coding 
forms used between a public switched telephone network and a mobile tele- 
5 phone network into compatible ones, for instance from a fixed network form to 
another cellular radio network form, and vice versa. The control unit 124 per- 
forms call control, mobility management, collection of statistical data and sig- 
naling. 

Figure 1 further shows the mobile services switching center 130 and 

10 a gateway mobile services switching center 132, which is responsible for the 
connections from the mobile telephone system to the outside world, in this 
case to a public switched telephone network 134. The mobile telephone sys- 
tem also comprises various databases that maintain various information in or- 
der to maintain the functionality of the system. Such a register is an HLR 

15 (Home Location Register) 150, which comprises information associated with 
the subscribers in the system. The HLR maintains, for example, information on 
the whereabouts of a subscriber at a given time. The system further comprises 
a logically MSC-specific VLR (Visitor Location Register) 152, which maintains 
information on users located within the area of a given MCS at a given time, 

20 and information on the location of the users in a more specific manner than the 
HLR. Furthermore, the system comprises an EIR (Equipment Identity Register) 
154, which maintains information on the terminals in the system. Each terminal 
typically comprises a device-specific device identifier, e.g. an I ME I 
(International Mobile Equipment Identifier), attached to the terminal already 

25 when the device was being manufactured, on the basis of which each terminal 
can be identified individually. The EIR maintains information on the device 
identifiers. 

As can be seen from Figure 1, the group switching field 122 can be 
used for establishing connections both to the PSTN (Public Switched Tele- 
30 phone Network) 134 through the mobile services switching center 130 and to a 
packet transmission network 136. 

The connection between the packet transmission network 136 and 
the group switching field 122 is established by an SGSN (Serving GPRS Sup- 
port Node) 138. The SGSN 138 is responsible for transferring packets be- 
35 tween the base station system and a GGSN (Gateway GPRS Support Node) 
140, and for keeping a record of the location of the subscriber terminal 100 in 
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its area. The SGSN 138 may also communicate with databases 150 to 154 of 
the mobile telephone system either through the MSC 130 or directly. 

The GGSN 140 combines a public packet transmission network 142 
and the packet transmission network 132. An Internet protocol or X.25 protocol 
5 can be used on the interface. By encapsulation, the GGSN 140 hides the in- 
ternal structure of the packet transmission network 136 from the public packet 
transmission network 142, so for the public packet transmission network 142, 
the packet transmission network 136 resembles a sub-network, the public 
packet transmission network being able to address packets to the subscriber 

10 terminal 100 located therein and to receive packets therefrom. 

The packet transmission network 136 is typically a network utilizing 
the Internet protocol of the radio network operator and carrying signaling and 
tunnelled user data. As regards the architecture and protocols below the Inter- 
net protocol layer, the structure of the network 136 may vary operator- 

15 specifically. 

The public packet transmission network 142 may be the global In- 
ternet, for example, to which the computer system 102 is connected. 

The computer system 102 typically comprises an authentication 
server 144, which is responsible for authenticating users trying to access the 

20 system and allowing authorized users to access the rest of the system 146. 
The authentication server 144 is not necessarily a separate apparatus but it 
can also be implemeted by software as a part of a computer. The authenticati- 
on server also comprises a memory 148, in which the user names of the users 
in the system and the corresponding personal identifiers and device-specific 

25 identifiers have been stored. The memory can be implemented as a fixed part 
of the normal server equipment or as separate database equipment. The rest 
of the system 146 typically comprises one or more computer hardware confi- 
gurations, which provide e-mail or database services and corresponding com- 
pany network solutions. 

30 A connection can be established to another data network 156, pre- 

ferably a local network, such as a company intranet, through a second GGSN 
140b. In the solution of the invention, a connection to a desired network requi- 
ring authentication can thus be established in many ways. 

The present invention thus particularly relates to reliably identifying 

35 a user while establishing a connection to a computer system. Although the 
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identification must be reliable, it is also desirable that the identification proce- 
dure can be implemeted smoothly as far as the user is concerned. 

Examine an example of the solution of the invention by means of 
flow diagrams 2a and 2b. In step 200, a user switches on a mobile station. 
5 Typically, the mobile station is at this stage set to request the user to enter a 
password, i.e. PIN (Personal Identification Number), which enables the mobile 
station to be used. In step 202, the user enters the password into the mobile 
station. The mobile station can then also be used as a common telephone, but 
when the user in step 204 starts an application requiring a predetermined 

10 computer system, such as an e-mail program, the mobile station then, in the 
solution of the invention, generates a one-time password in step 206. This 
step will be described later in closer detail. 

If the mobile station is not to "be used for communication that requi- 
res encryption, the user can enter another predetermined password, i.e. PIN, 

15 into the mobile station while switching on the device. In a preferred embodi- 
ment of the invention, the user thus has at least two different passwords, and 
some of these passwords enable applications requiring encryption to be used 
while some do not. Hence, the mobile station can be safely used and, if desi- 
red, also lent to a second party unequipped to use applications requiring en- 

20 cryption. 

Next, the mobile station typically encodes the generated password 
and the user name of the user in an appropriate manner and transmits a 
message to the computer system in step 208. The computer system receives 
the message, and in step 210, itself generates a corresponding one-time 

25 password and compares the passwords, and if the passwords match, grants 
access to the information in the system, and the connection can continue in 
step 212. If the passwords do not match, the system does not, in the preferred 
embodiment of the invention, transmit any response to the mobile station. This 
enhances security since a potential intruder will not find out why the connecti- 

30 on failed. 

The password and the user name can be transmitted to the com- 
puter system appropriately encrypted, either by using encryption specific to the 
radio system or unique encryption enhancing security, which can be decrypted 
by the receiving end. These steps can be implemented in ways known to one 
35 skilled in the art. 
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The generation of passwords is illustrated in closer detail in diagram 
2b. In step 220, the mobile station synchronizes its internal clock with the 
system clock. The synchronization can be carried out by utilizing the known 
synchronization methods. The synchronization is to make sure that the mobile 
5 station and the system use the same time parameter in generating the 
passwords. In step 222, an "A subscriber identifier" A_SCRBR is read from a 
subscriber-specific identification module of the mobile station, such as an 
SIM/USIM ([Universal] Subscriber Identity Module) card, or the like. 

In step 224, the device identifier of the mobile station is read. In the 
10 solution of the invention, each mobile station has a device-specific device 
identifier, e.g. an IMEI (International Mobile Equipment Identifier), attached to 
the mobile station when the mobile station was being manufactured, on the 
basis of which each mobile station can be identified individually. In the GSM 
system, for example, the IMEI identifier comprises the following fields: 
15 TAC type approval code, 

FAC final assembly code, 
SNR serial number, and 
SVN software version number. 
In step 226, the personal identifier number, or PIN, supplied by the 
20 user is read from the memory. 

Using the aforementioned values (personal identification number, or 
PIN, of the user, subscriber-specific identifier A_SCRBR, device-specific iden- 
tifier IMEI of the mobile station and time), the mobile station computes a one- 
time password by applying a predetermined algorithm. The predetermined al- 
25 gorithm can be fixedly programmed in the mobile station, or alternatively, it can 
be changeable, for example downloadable from the computer system. 

In addition to the aforementioned values, it is also feasible to use 
numbers stored in the memory of the mobile station as an algorithm parame- 
ter. For example, a set of prime numbers can be downloaded from the com- 
30 puter system in table form. The same table is also known to the authentication 
server. 

The mobile station can also be lent to another user if the PIN of the 
mobile station is changed, because it is then impossible to establish a connec- 
tion to the computer system. The terminal can then either completely prevent 
35 the identification procedure from starting or the terminal can allow the identifi- 
cation procedure; in such a case, connection setup always fails anyway be- 



cause of an incorrect PIN. Similarly, connection setup can be prevented also 
by changing the SIM card. 

The characteristics of the invention can be implemented both in the 
mobile station and the computer system preferably by software. Examine next 
5 an example of the structure of a mobile station by means of Figure 3. 

Figure 3 shows an example of the structure of a mobile station 100. 
The mobile station comprises an antenna 300, which is used for transmitting 
and receiving signals. Examine first the receiver section. A signal received by 
the antenna 300 is supplied through a duplex filter 302 to a radio frequency 

10 receiver 304. The duplex filter separates the transmitting and receiving fre- 
quencies from each other. The radio frequency receiver 304 comprises a filter 
to block frequencies outside the desired frequency band. Next, the signal is 
converted to intermediate frequency or directly to baseband, and the base- 
band signal is sampled and quantized at an analogue/digital converter 306. An 

15 equalizer 308 compensates for interference caused by multipath propagation, 
for example. From the equalized signal, a demodulator 310 takes a bit stream, 
which is transmitted to a demultiplexer 312. The demultiplexer 312 separates 
the bit stream from different time slots into separate logical channels. A chan- 
nel codec 314 decodes the bit streams of the separate logical channels, i.e. 

20 decides whether a bit stream is signaling data, which is transmitted to a control 
unit 316, or whether the bit stream is speech, which is transmitted to a speech 
codec 318, or data, which is transmitted to a data unit 320, for example. The 
data unit can be, for example, a display of the mobile station or a data proces- 
sing unit, peripheral or the like. From the speech codec 318, a speech signal is 

25 forwarded to a loudspeaker 322. The channel codec 314 also performs error 
correction. The control unit 316 performs internal control functions by control- 
ling the different units. 

In the transmitter section, the channel codec 314 receives the sig- 
nal to be transmitted either from the data unit 320 . or the speech codec 318. 

30 The speech codec receives the signal from a microphone 324. The data unit 
may be, for example, a keypad or a touch-sensitive display or a peripheral of 
the mobile station. A burst generator 326 adds a training sequence and a tail 
to the data supplied from the channel codec 314. A multiplexer 328 assigns a 
time slot to each burst. A modulator 330 modulates digital signals to a radio 

35 frequency carrier. This is an analogue operation, therefore a digital/analogue 
converter 332 is needed for performing it. A transmitter 334 comprises a filter 
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to restrict the bandwidth. In addition, the transmitter 334 controls the output 
power of a transmission. A synthesizer 336 arranges the necessary frequen- 
cies for the different units. The synthesizer 336 generates the necessary fre- 
quencies by using a voltage controlled oscillator, for example. 

In a manner shown in Figure 3, the structure of the transceiver can 
be further divided into radio frequency parts 338 and a digital signal processor 
including software 340. The radio frequency parts 338 comprise the duplex 
filter 302, receiver 304, transmitter 334 and synthesizer 336. The digital signal 
processor including the software 340 comprises the equalizer 308, demodu- 
lator 310, demultiplexer 312, channel codec 314, control unit 316, burst gene- 
rator 326, multiplexer 328 and modulator 330. The analogue/digital converter 
306 is needed for converting an analogue radio signal to a digital one and, 
correspondingly, the digital/analogue converter 332 for converting a digital 
signal to an analogue one. 

The mobile station further comprises a subscriber-specific reader 
342 of the identification module, typically a SIM/USIM card reader or the like. 
When the mobile station is being switched on, the control unit 316 of the mo- 
bile station checks whether a card is inserted in the reader, and reads the user 
identification data from the card. When the mobile station was being manu- 
factured, a device-specific identifier IMEI, which is readable by the control unit 
316, was also stored in the mobile station in a memory element 344. The devi- 
ce-specific identifier is fixedly stored in a memory circuit and cannot be easily 
changed. 

Naturally, the device of the invention may comprise different user 
interface parts, such as a display and a keypad, but these parts are not 
described in closer detail here. 

The functions of the invention can thus be impleneted in the mobile 
station preferably by software. Software comprising the necessary functional 
commands can be located in connection with the control unit 316. The softwa- 
re may naturally have a modular structure, i.e. it may comprise several sepa- 
rate programs that can be updated separately from, for example, the computer 
system or the radio network operator. 

The solution of the invention can also be applied to mobile stations 
which are equipped with more than one SIM/USIM card. Such mobile stations 
include, for example, telephones that enable "pre-paid" SIM/USIM cards to be 
used. Such a mobile station enables a solution wherein only one card is used 
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for establishing a connection. In an embodiment of the invention, some of the 
information necessary for encryption is obtained from the card which is not 
used in establishing the connection. 

Examine next another preferred embodiment of the invention. When 
5 a connection is being established in the GSM and GPRS systems, for 
example, both the terminal and the network know an "SRES" (Signed RESuft) 
field. The field is also called an XRES. The field is typically 32 to 128 bits long. 
In connection with connection setup, the SRES is specified by both parties to 
the connection by utilizing the particular common parameters and the same 

10 algorithm. In a prior art solution, the SRES is transmitted from the terminal to 
the network wherein the computed number is compared with the number com- 
puted in the network. Further information on the SRES field can be found in M. 
Mouly, M. P. Pautet: The GSM System for Mobile Communications. ISBN 2- 
9507190-0-7, chapter 7.2.2.1, for example, which is incorporated herein by 

15 reference. 

In the present embodiment of the invention, instead of the SRES 
only, the terminal transmits information that may comprise fields: 
SRES signed result, 
TIME time information, 
20 IMSl internation number of the terminal, and 

IMEI device number of the terminal. 

Compared with the prior art, an advantage of this embodiment is, naturally, 
enhanced protection since it is both time- and device-specific. In GSM-based 
systems, the international number IMSl of the terminal comprises a national 
25 code, operator code and actual telephone number of the terminal. 

Examine next another preferred embodiment of the invention. When 
the RADIUS protocol is used in connection with the PPP/CHAP method, the 
authentication server receives fields "chap challenge", "user name" and "chap 
response" from the terminal. The authentication server compares the "chap 
30 response" generated by itself with the one received from the terminal. In a so- 
lution of the present embodiment of the invention, the fields have values: 
"chap challenge" SRES, 
"user name" user name to the system, and 

"chap response" word formed from the values 

35 IMSl, IMEI, PIN, time, 

SRES. 
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Since the fields include the user name in plain text, the authentica- 
tion server is thus able to quickly select from its own database the other infor- 
mation and generate a time-dependent, local "chap response", which thus has 
to correspond with the one received from the terminal. 
5 Furthermore, in another preferred embodiment of the invention, a 

modified PPP/PAP method is utilized in connection with the RADIUS protocol. 
In the PPP/PAP method, the user name and password were originally 
transmitted unencrypted over the transmission path, in which case protection 
was weak, in the solution of the invention, an encrypted identifier based on the 

10 values IMSI, IMEI, PIN, time, SRES and generated according to the invention 
is thus transmitted in the field reserved for the user name. The SRES is 
transmitted in the field reserved for the password. Further, the user name to 
the system is transmitted in the "calling station id" field. This is to enable the 
authentication server to identify the caller without going through all potential 

15 users. When the RADIUS method is used, the field reserved for the password 
(in which the SRES is now transmitted) can be protected by using the common 
key of the GGSN and a company network. In a solution of the present embo- 
diment of the invention, the fields thus have values: 

"user name" word formed from the values 

20 IMSI, IMEI, PIN, time, 

SRES, 

"user password" SRES, and 

"calling station id" user name to the system. 
In a preferred embodiment of the invention, in the alternatives 
25 described above the user name to the system is the same as the user's te- 
lephone number in the ISDN form, i.e. a number called an MSISDN. Further 
information on this can be found in M. Mouly, M. P. Pautet: The GSM System 
for Mobile Communications. ISBN 2-9507190-0-7, chapter 8.1. 1., for example, 
which is incorporated herein by reference. 
30 Although the invention has been described above with reference to 

the example according to the accompanying drawings, it is obvious that the 
invention is not restricted thereto but can be modified in many ways within the 
scope of the inventive idea disclosed in the attached claims. 
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CLAIMS 

1 . A method of reliably identifying a user in a computer system, in 
which method a mobile station is used for communicating with the computer 
system and a personal identification number is supplied into the mobile sta- 

5 tion, the method comprising the steps of: 

generating a first one-time password in the mobile station without 
any action by the user by utilizing a known algorithm on the basis of a per- 
sonal identification number of the user, subscriber-specific identifier read from 
a subscriber-specific identification module of the mobile station, device-specific 
1 0 identifier of the mobile station and time, 

encoding the first one-time password and the subscriber-specific 
identifier of the user at the mobile station, 

transmitting the encoded password and subscriber-specific identifier 
to an authentication server of the computer system, 
15 identifying the user at the authentication server on the basis of the 

subscriber-specific identifier, and 

searching a database for the personal identifier number of the user 
and the device-specific identifier of the mobile station associated with the user, 
generating a second one-time password at the authentication 
20 server by utilizing the predetermined algorithm on the basis of the personal 
identification number of the user, subscriber-specific identifier, device-specific 
identifier of the mobile station and time, 

comparing the first password and the second password with each 
other at the authentication server, and if the passwords match, 
25 enabling the telecommunication connection between the mobile 

station of the user and the computer system. 

2. A method as claimed in claim 1, wherein the mobile station syn- 
chronizes the timimg of the mobile station with the timing of the authentication 
server before the identification procedure is started. 

30 3. A method as claimed in claim 1, wherein the user is identified 

automatically when the user starts an application utilizing the computer system 
in the mobile station. 

4. A method as claimed in claim 1, wherein the authentication 
server transmits no information to the mobile station if the first and the second 

35 passwords do not match. 
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5. A method as claimed in claim 1, wherein during the identification, 
the terminal transmits to the authentication server a message comprising at 
least a field comprising a SRES value, a field comprising time, a field com- 
prising an international telephone number of the terminal, and a field compris- 

5 ing a device number of the terminal. 

6. A method as claimed in claim 1, wherein during the identification, 
a PPP/CHAP protocol is used in connection with a RADIUS protocol, and the 
terminal transmits to the authentication server a message comprising at least a 
field comprising a SRES value, a field comprising a user name to the system, 

10 and a field comprising a password generated from a device identifier, sub- 
scriber-specific identifier of the user, personal identification number of the 
user, time and the SRES value. 

7. A method as claimed in claim 1, wherein during the identification, 
a PPP/PAP protocol is used in connection with the RADIUS protocol, and the 

15 terminal transmits to the authentication server a message comprising at least a 
field comprising a password generated from the device identifier, subscriber- 
specific identifier of the user, personal identification number of the user, time, 
and SRES value, a field comprising a SRES value, and a field comprising a 
user number to the system. 
20 8. A method as claimed in any one of preceding claims 1 to 7, 

wherein information necessary for encryption is stored in the terminal in more 
than one subscriber-specific identification module. 

9. A method as claimed in claim 6 or 7, wherein the user name to 
the system is the user's MSISDN. 
25 10. An arrangement for reliably identifying a user in a computer 

system, which arrangement comprises 

a mobile station used for communicating with the computer system, 
the mobile station comprising 

a subscriber-specific identification module comprising a subscriber- 
30 specific identifier, 

a device-specific identifier permanently encoded in the mobile sta- 
tion, 

means for reading a personal identifier number which is supplied by 
the user and which enables the device to be used, 
35 means for checking the correctness of the identifier number always 

before the device is put to use, and 



which arrangement comprises an authentication server comprising 
memory means for storing the user names of the users in the sys- 
tem and the corresponding personal identifiers and device-specific identifiers, 
the mobile station further comprising 
5 means for generating a first one-time password without any action 

by the user by utilizing a known algorithm on the basis of the personal identifi- 
cation number of the user, subscriber-specific identifier read from a subscriber- 
specific identification module of the mobile station, device-specific identifier of 
the mobile station and time, 
10 means for encoding the first one-time password and the subscriber- 

specific identifier of the user, 

means for transmitting the encoded password and subscriber- 
specific identifier to an authentication server of the computer system, and the 
authentication server is further arranged to 
15 identify the user on the basis of the subscriber-specific identifier, 

and search a database for the personal identifier number of the user and the 
device-specific identifier of the mobile station associated with the user, 

generate a second one-time password at the authentication server 
by utilizing the predetermined algorithm on the basis of the personal identifica- 
20 tion number of the user, subscriber-specific identifier, device-specific identifier 
of the mobile station and time, 

compare the first password and the second password with each 
other at the authentication server, and if the passwords match, enable the 
telecommunication connection between the mobile station of the user and the 
25 computer system. 

1 1. An arrangement as claimed in claim 10, wherein the mobile sta- 
tion is arranged to synchronize the timimg of the mobile station with the timing 
of the authentication server before the identification procedure is started. 

12. An arrangement as claimed in claim 10, wherein the mobile sta- 
30 tion is arranged to identify the user automatically when the user starts an ap- 
plication utilizing the computer system in the mobile station. 

13. An arrangement as claimed in claim 10, wherein the authentica- 
tion server is arranged not to transmit any information to the mobile station if 
the first and the second passwords do not match. 

35 14. An arrangement as claimed in claim 10, wherein the mobile sta- 

tion is arranged to transmit to the authentication server a message comprising 
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at least a field comprising a SRES value, a field comprising time, a field com- 
prising an international telephone number of the terminal, and a field compris- 
ing a device number of the terminal. 

15. An arrangement as claimed in claim 10, wherein the mobile sta- 
5 tion and the authentication server are arranged to use a PPP/CHAP protocol 

in connection with a RADIUS protocol during the identification, and the termi- 
nal is arranged to transmit to the authentication server a message comprising 
at least a field comprising a SRES value, a field comprising a user name to the 
system, and a field comprising a password generated from a device identifier, 
10 subscriber-specific identifier of the user, personal identification number of the 
user, time and the SRES value. 

16. An arrangement as claimed in claim 10, wherein the mobile sta- 
tion and the authentication server are arranged to use a PPP/PAP protocol in 
connection with the RADIUS protocol during the identification, and the mobile 

15 station is arranged to transmit to the authentication server a message com- 
prising at least a field comprising a password generated from the device iden- 
tifier, subscriber-specific identifier of the user, personal identification number of 
the user, time, and SRES value, a field comprising a SRES value, and a field 
comprising a user number to the system. 

20 17. An arrangement as claimed in claims 15 or 16, wherein the user 

name to the system is the user's MSISDN. 

18. An arrangement as claimed in any one of preceding claims 10 
to 17, wherein the mobile station is a GPRS system mobile station. 

19. An arrangement as claimed in any one of preceding claims 10 
25 to 17, wherein the mobile station comprises more than one subscriber-specific 

identification module, and information necessary for encryption is stored in 
more than one identification module. 



ABSTRACT 

The invention relates to an arrangement and a method for reliably identifying a 
user in a computer system. The method utilizes a mobile station for communi- 
cating with the system. The method comprises generating a first one-time 
5 password in the mobile station by utilizing a known algorithm on the basis of 
the identification number of the user, subscriber-specific identifier, device- 
specific identifier of the mobile station, and time. The password obtained and 
the subscriber-specific identifier of the user are encoded and transmitted to an 
authentication server of the computer system, comprising identifying the user 

10 on the basis of the subscriber-specific identifier, searching a database for the 
personal identifier number of the user and the device-specific identifier of the 
mobile station associated with the user, generating a second password at the 
authentication server by utilizing the same predetermined algorithm on the ba- 
sis of the personal identification number of the user, subscriber-specific identi- 

15 fier, device-specific identifier of the mobile station and time, comparing the first 
and the second passwords with each other at the authentication server, and if 
the passwords match, enabling the telecommunication connection between 
the mobile station and the computer system. 
(Figure 1) 
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